In the last post in this series, we took a look at the configuration of the AAA method lists and other fun AAA requirements. These point to a RADIUS server (or group thereof). This should logically make you think of the RADIUS server setup itself. Let’s tackle the most likely commands for the lab exam now. Once again, be ready to be flexible at the command line and meet the requirements of your specific lab task. Context sensitive help can obviously be your best friend.
Continue reading Switch Configuration for ISE Integration – Part 2 – RADIUS Server Config
My study of the ASAs is drawing to a close. My plan was to do a lot of posts regarding these studies, but as you might guess, it is too difficult to study and do a lot of blogging on the process when you are dealing with a fixed amount of time for actual study. Here is a recap of prep required on the ASAs.
- Cisco ASA 5500 and 5500-X Series Adaptive Security Appliances
- Cisco ASA 5500 Series Adaptive Security Appliances OS Software Versions 8.2x, 8.4x, 8.6x
- We can expect 4 of these devices
The Study Checklist:
- Initializing the Basic Cisco ASA Firewall (IP Address, Mask, Default Route, etc.)
- Understanding Security Levels (Same Security Interface)
- Understanding Single vs. Multimode
- Understanding Firewall vs. Transparent Mode
- Understanding Multiple Security Contexts Continue reading CCIE Security Version 4 – The ASAs
I have never been that big a fan of GNS3/Dynamips. I mean, I will use it in a pinch, like flying across the country and writing an article that requires I have access to the CLI, but that is about it.
Now – that is going to change a bit. With the GNS3/PEMU platform able to emulate the Adaptive Security Appliance (ASA) from Cisco Systems, I can use it for a huge chunk of my CCIE Security Version 4 lab prep.
In order to quickly get up to speed with the latest version of these technologies, I turned to the Keith Barker created series at CBTNugget.com. Yes, that’s right, he did an entire series on getting the most out of GNS3. I did not watch the entire thing – just enough to get my ASAs up and running for practice.
Since my Hands On Practice will begin with the ASAs, I will be using this emulator platform for initial preparation. Of course I will detail exactly what I am doing here at the blog!